Поиск уязвимостей
Количество 13
Количество 13
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ...
SUSE-SU-2026:3337-1
Security update for wget
GHSA-fxf9-rxpj-26gx
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
RLSA-2026:62144
Moderate: wget security, bug fix, and enhancement update
ELSA-2026-62144-0
ELSA-2026-62144-0: wget security, bug fix, and enhancement update (MODERATE)
ALT-PU-2026-13338
ALT-PU-2026-13338: package `wget` update to version 1.25.0-alt6
openSUSE-SU-2026:21665-1
Security update for wget
SUSE-SU-2026:3206-1
Security update for wget
SUSE-SU-2026:3148-1
Security update for wget
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58469 GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing | 0% Низкий | 3 месяца назад | |
| CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ... | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | SUSE-SU-2026:3337-1 Security update for wget | 0% Низкий | 3 месяца назад | |
| GHSA-fxf9-rxpj-26gx GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | RLSA-2026:62144 Moderate: wget security, bug fix, and enhancement update | 2 месяца назад | ||
| ELSA-2026-62144-0 ELSA-2026-62144-0: wget security, bug fix, and enhancement update (MODERATE) | 2 месяца назад | ||
| ALT-PU-2026-13338 ALT-PU-2026-13338: package `wget` update to version 1.25.0-alt6 | CVSS3: 7.5 | 3 месяца назад | |
| openSUSE-SU-2026:21665-1 Security update for wget | 2 месяца назад | ||
| SUSE-SU-2026:3206-1 Security update for wget | 4 месяца назад | ||
| SUSE-SU-2026:3148-1 Security update for wget | 4 месяца назад |
Уязвимостей на страницу